This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa File: D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa (raw, json) Hash identifier: 8VoNb/7A+xDcEz+hMFU7CsCAQw+ePCtKqSmXmX3INLs= Subject key identifier: 0F:7C:25:80:C1:84:E5:0C:1D:C7:0B:09:FA:5E:98:39:5A:CC:2E:C3 Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877 Certificate serial: 019B7CED4403CEF4D77124B34804A8953057 Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211434 IP address blocks: 193.163.184.0/24 maxlen: 24 2a10:e540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:44:03:ce:f4:d7:71:24:b3:48:04:a8:95:30:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1a573915153de82890eae1303067fa68b2877 Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f7c2580c184e50c1dc70b09fa5e98395acc2ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:91:60:e8:5d:1b:65:f4:74:86:ae:1a:bd: c8:4d:a9:ca:5a:3b:12:f2:9e:e5:93:2e:d1:0b:0e: ce:8e:c3:07:7e:89:93:c7:59:c5:e3:4a:7a:9d:51: 20:11:27:4d:7f:d4:9c:a7:31:9f:60:e9:d4:80:48: f6:c6:77:dc:1a:1c:90:57:83:df:59:26:36:55:04: e9:ed:d0:6a:0a:a2:a4:86:52:89:ff:70:95:82:6e: f2:79:60:68:69:91:c9:62:54:65:7f:b4:53:68:54: b3:02:37:37:2b:32:e3:88:36:d4:3d:da:5f:88:61: e6:6c:6d:80:81:cb:18:da:f2:42:70:08:41:63:7d: da:f9:64:5b:35:b6:31:4e:04:70:da:b9:6a:eb:b3: e0:87:2f:e1:7d:ff:df:e2:b9:dd:39:17:50:09:bf: c2:32:4d:3a:32:51:72:39:7c:36:cf:43:89:80:d9: b6:5f:7e:b9:0e:ea:84:05:92:ae:9a:17:95:2b:9a: 80:17:92:9e:82:a5:b4:96:c2:18:59:8a:ef:59:dc: c7:e5:fe:d7:b4:49:98:6e:69:18:4e:ad:6d:c5:55: 81:9b:1c:22:38:1d:7b:4f:f3:ef:e5:09:cd:fe:79: a1:e6:52:46:64:a2:ad:53:ea:bf:74:1d:e2:e2:f1: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7C:25:80:C1:84:E5:0C:1D:C7:0B:09:FA:5E:98:39:5A:CC:2E:C3 X509v3 Authority Key Identifier: keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.184.0/24 IPv6: 2a10:e540::/29 Signature Algorithm: sha256WithRSAEncryption a8:4c:44:9b:b8:89:fb:7c:36:cb:6e:d2:7a:91:c5:09:06:e0: 98:e6:6a:2d:31:3d:dc:02:6c:bf:cb:69:59:bf:01:59:c9:ed: 31:36:e9:10:0c:f6:79:e2:bd:10:65:19:fd:a8:21:ef:f2:df: 41:f1:fb:26:61:43:6f:7b:d1:96:1e:3f:2b:a5:47:f2:67:bb: c3:d8:46:8c:fa:11:b5:f9:4f:42:d6:23:7f:c1:2d:83:f1:93: a8:f3:17:1a:63:40:2d:c0:8f:74:4b:a7:75:1e:82:7f:df:8c: 12:d8:b0:0a:4b:af:1f:0b:71:47:a6:97:b4:d7:ef:87:55:41: e6:a6:ff:55:c5:f0:9b:bb:99:51:ae:dc:12:14:b5:51:73:9b: 27:f7:71:02:2f:2e:64:bb:c3:d7:a6:c3:12:10:3d:ca:46:4d: 9c:3a:52:16:96:59:87:12:41:aa:c9:9c:11:92:77:13:0f:61: 49:28:2f:69:a9:9e:a9:27:e4:c3:d9:8c:70:44:bd:c4:54:5d: 17:5c:a7:39:91:a8:6c:6e:d3:7e:7b:3c:d2:dd:6b:a9:3e:d5: 1a:ce:c4:6e:97:ed:b5:1d:5c:e3:c4:6a:b0:2e:14:f7:f7:d0: 3c:ec:38:54:1c:b3:35:05:32:f8:57:4f:b0:c5:05:e3:ce:42: 62:55:89:74 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87UQDzvTXcSSzSASolTBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFhNTczOTE1MTUzZGU4Mjg5MGVhZTEzMDMwNjdmYTY4 YjI4NzcwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjdjMjU4MGMxODRlNTBjMWRjNzBiMDlmYTVlOTgzOTVhY2MyZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoluRYOhdG2X0dIauGr3ITanKWjsS 8p7lky7RCw7OjsMHfomTx1nF40p6nVEgESdNf9ScpzGfYOnUgEj2xnfcGhyQV4Pf WSY2VQTp7dBqCqKkhlKJ/3CVgm7yeWBoaZHJYlRlf7RTaFSzAjc3KzLjiDbUPdpf iGHmbG2AgcsY2vJCcAhBY33a+WRbNbYxTgRw2rlq67Pghy/hff/f4rndORdQCb/C Mk06MlFyOXw2z0OJgNm2X365DuqEBZKumheVK5qAF5KegqW0lsIYWYrvWdzH5f7X tEmYbmkYTq1txVWBmxwiOB17T/Pv5QnN/nmh5lJGZKKtU+q/dB3i4vHf7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA98JYDBhOUMHccLCfpemDlazC7DMB8GA1UdIwQY MBaAFDXxpXORUVPegokOrhMDBn+miyh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAt MzI5MjExMDI5YTFhLzEvRDN3bGdNR0U1UXdkeHdzSi1sNllPVnJNTHNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAtMzI5MjExMDI5YTFh LzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaO4MA0E AgACMAcDBQMqEOVAMA0GCSqGSIb3DQEBCwUAA4IBAQCoTESbuIn7fDbLbtJ6kcUJ BuCY5motMT3cAmy/y2lZvwFZye0xNukQDPZ54r0QZRn9qCHv8t9B8fsmYUNve9GW Hj8rpUfyZ7vD2EaM+hG1+U9C1iN/wS2D8ZOo8xcaY0AtwI90S6d1HoJ/34wS2LAK S68fC3FHppe01++HVUHmpv9VxfCbu5lRrtwSFLVRc5sn93ECLy5ku8PXpsMSED3K Rk2cOlIWllmHEkGqyZwRkncTD2FJKC9pqZ6pJ+TD2YxwRL3EVF0XXKc5kahsbtN+ ezzS3WupPtUazsRul+21HVzjxGqwLhT399A87DhUHLM1BTL4V0+wxQXjzkJiVYl0 -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:03 2026 by rpki-client